Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33322d3332203d3e20323637333733.roa
File:                     323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (raw, json)
Hash identifier:          wTvI9Jk+Tyb03IMmdqeF3YHfX3R4XnfBxDHBROTaZgA=
Subject key identifier:   70:97:C1:74:50:DA:DD:3B:29:E8:15:4B:5C:CC:3B:EA:4D:A8:1B:F1
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       7D369EBB9D4FB9AC14B5CE01AFB6114616B64DB9
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33322d3332203d3e20323637333733.roa
Signing time:             Thu 26 Mar 2026 19:33:13 +0000
ROA not before:           Thu 26 Mar 2026 19:28:13 +0000
ROA not after:            Thu 25 Mar 2027 19:33:13 +0000
asID:                     267373
IP address blocks:        2804:4c7c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:36:9e:bb:9d:4f:b9:ac:14:b5:ce:01:af:b6:11:46:16:b6:4d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Mar 26 19:28:13 2026 GMT
            Not After : Mar 25 19:33:13 2027 GMT
        Subject: CN=7097C17450DADD3B29E8154B5CCC3BEA4DA81BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b2:57:9d:69:da:d0:b5:b9:6c:55:37:4a:3e:
                    c3:a5:16:95:38:20:bb:b9:c8:73:ec:da:e6:89:fe:
                    0c:26:e4:65:a3:03:4d:5f:78:88:d5:8b:68:a1:1b:
                    64:36:95:51:ef:de:42:dd:53:32:b9:f4:d2:6b:61:
                    88:c3:f8:37:53:25:9d:32:02:90:1f:cc:9c:d5:c4:
                    bf:b0:98:07:a5:3e:94:b9:6b:22:fb:75:e9:ef:dc:
                    c5:10:b2:14:5d:ef:46:80:cf:05:f1:9e:98:66:9c:
                    58:b3:9c:ef:48:98:b9:06:22:1f:c4:18:fe:e6:ba:
                    ce:2b:95:49:0c:ed:e5:17:9b:b3:86:5a:8f:e4:c9:
                    92:7c:30:13:c9:38:53:09:e0:b6:62:18:a0:24:a9:
                    77:fb:40:df:ac:b2:88:b1:85:f7:cf:a0:f1:87:d8:
                    37:0d:e6:f4:d2:a2:f2:8e:35:1f:32:46:27:bc:7b:
                    fa:0b:bf:2f:22:9e:f7:3d:30:01:1e:84:24:97:f2:
                    41:1f:ed:0b:bc:81:0b:67:69:c2:ec:ee:7e:14:8b:
                    ab:ec:81:f5:26:d2:4f:bc:6e:90:77:3a:94:67:bd:
                    02:33:f4:67:22:0f:a1:be:55:e7:52:d4:fc:a3:6e:
                    00:fd:bd:fb:99:98:8b:db:aa:8d:4f:bf:ec:34:6c:
                    e1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:97:C1:74:50:DA:DD:3B:29:E8:15:4B:5C:CC:3B:EA:4D:A8:1B:F1
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33322d3332203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:67:cd:84:ae:ea:b4:ee:8c:45:c1:7c:a4:f2:1d:ec:ab:2f:
         d6:23:bb:65:aa:58:43:ed:f4:b1:f0:48:66:15:1d:67:4f:de:
         a6:00:68:7a:28:d1:c6:40:31:39:ee:78:4c:fd:a4:54:5b:ea:
         99:8d:94:72:f4:82:c4:c2:e4:75:8d:96:26:7a:04:fd:50:67:
         7a:ac:b8:f6:3e:50:14:37:5e:9e:de:8a:79:78:5f:72:18:cb:
         c6:f2:fb:99:53:8a:76:14:93:a7:9d:02:0d:29:2e:6f:50:2c:
         96:0a:a1:c0:7c:81:9a:99:51:74:f7:73:9b:c6:bd:f3:47:be:
         3d:f2:4f:5a:5b:c9:93:65:5a:3d:ed:ab:ad:7a:0f:4a:7a:e4:
         c5:27:10:6c:0e:49:0f:d0:23:e3:04:63:ce:a6:b3:29:ae:74:
         a4:de:f2:c2:89:40:d6:86:2e:1d:8d:a8:36:65:9c:95:fb:4b:
         e3:b1:c0:ff:6d:4e:3c:d7:b4:64:fd:3c:a2:6e:8f:a0:75:72:
         af:04:5e:6b:17:fc:f8:f7:3f:51:50:52:1e:60:3c:13:48:9d:
         54:50:7a:1d:80:5c:a8:88:5b:2f:d3:ca:0e:d0:3b:14:ae:23:
         b2:bb:ee:12:82:31:fa:0f:b2:f7:c5:7c:f8:82:92:fc:1c:dc:
         11:9d:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:46:55 2026 by rpki-client